# IP Intelligence Briefing: 35.188.63.183/32
## Executive Summary
IP address 35.188.63.183 is associated with Google Cloud infrastructure and presents a Low Risk profile with a risk score of 25. The IP shows no active threat indicators but exhibits one DNSBL listing that warrants monitoring.
## Ownership and Infrastructure
- Organization: Google LLC
- ASN: 396982 (GOOGLE-CLOUD)
- CIDR Block: 35.184.0.0/13
- Geolocation: United States, Council Bluffs, IA (America/Chicago timezone)
- Registration: ARIN RIR
- Infrastructure Type: Cloud Provider (Google Cloud Platform)
## Network Classification
- Primary Classification: Google Cloud
- Connection Type: Firewalled / No Services
- Open Ports: None detected
- Service Status: No HTTP/TLS services detected
- Reverse DNS: 183.63.188.35.bc.googleusercontent.com
- Forward DNS Resolution: Confirmed (googleusercontent.com)
## Threat Assessment
- Overall Risk Score: 25 (Low Risk)
- Blacklist Status: 1 DNSBL listing (out of 8 total lists)
- Known Threats: None detected
- Tor/Proxy/VPN: Not identified as any of these types
- Abuse Confidence: Not scored
- Campaign Associations: None identified
## Control Plane Analysis
- BGP Prefix: 35.188.48.0/20
- Route Stability: Not stable
- DNSSEC: Valid
- CAA Records: Present
- DNSBL Listings: 1 (requires investigation)
- Operator Score: 0.3478 (Basic)
## Neighborhood Analysis (35.188.63.0/24)
- Abuse Density: 0 (Clean subnet)
- Threat Siblings: 0
- Active Siblings: 0
- Classification: Clean
## Observation History
- Total Observations: 20
- Most Recent: 2026-08-05
- Historical Threat Persistence: 0 days
- Ownership Changes: 0
- Signal Trend: No escalating threat patterns observed
## Recommended Actions
Based on the risk profile, no immediate blocking is recommended. However, the following actions are advised:
1. Monitor DNSBL Listing: Investigate the single DNSBL listing to understand the specific reason for enumeration
2. Verify Route Stability: The "isRouteStable: false" flag warrants periodic verification of BGP announcements
3. Standard Cloud Egress: Treat as legitimate Google Cloud infrastructure; allow standard GCP egress policies
4. No Firewall Rules Required: No specific blocking rules recommended at this time
## Intelligence Narrative
The IP address 35.188.63.183 is a Google Cloud Platform infrastructure address with a Low Risk classification. The IP has no open services detected and shows no evidence of malicious activity. The single DNSBL listing requires investigation but does not indicate active abuse. The subnet (35.188.63.0/24) shows zero abuse density and no threat siblings. Historical data shows no persistent malicious behavior. SOC teams should permit standard Google Cloud traffic while monitoring the DNSBL enumeration reason. No immediate action is required beyond standard cloud provider egress policies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.184.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 183.63.188.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 183.63.188.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-02T00:57:47+00:00 |
| Valid Until | 2027-08-02T00:59:47+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 0095F68EE946A0593AB51FB6DD8EC5A98A |
| Thumbprint | B2E9B192057D5B81C540EE66954304D954ABF942 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 32% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 25% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-27 09:39:30 UTC |
| Last Seen | 2026-08-12 21:28:44 UTC |
| Profile Built | 2026-08-12 21:33:27 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 27 |
Full dossier details are available via our API.